Post
WP Security Ninja
wpsecurityninja.bsky.social
did:plc:qkjsmf6qnaorfoge6n2ast23
WordPress 7.1.1 (17 Sep) patched Click2Shell and Comment2Shell (CVE-2026-93485). Public PoCs and mainstream write-ups landed 21–22 Sep.
Agency checklist:
1) Confirm every install is on 7.1.1 or your branch’s security backport
2) Check inactive themes you did not expect
3) Tighten comment moderation
2026-09-22T13:44:17.972Z